Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/q3dBPxfUPSE2WPozzCwpqur8lq0.roa
File: q3dBPxfUPSE2WPozzCwpqur8lq0.roa (raw, json)
Hash identifier: rkiQw/1JHjQKH3ev31dt/FCGbPMsrpMg+iTztYHjBp8=
Subject key identifier: AB:77:41:3F:17:D4:3D:21:36:58:FA:33:CC:2C:29:AA:EA:FC:96:AD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188DD6E2601DD6EA0456A0EBFFF4E54AC7A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/q3dBPxfUPSE2WPozzCwpqur8lq0.roa
Signing time: Wed 21 Jun 2023 10:09:23 +0000
ROA not before: Wed 21 Jun 2023 10:09:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:dd:6e:26:01:dd:6e:a0:45:6a:0e:bf:ff:4e:54:ac:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 21 10:09:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab77413f17d43d213658fa33cc2c29aaeafc96ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ad:5d:0b:aa:3d:ef:b5:a5:a8:46:62:f4:4f:
c7:50:a7:05:a4:74:b6:94:19:d2:0c:a6:ae:0b:a3:
6f:a5:50:92:6a:30:8b:2b:e7:0d:15:61:11:9f:92:
ef:3b:60:d5:bc:18:c6:2d:c4:26:38:10:6e:0d:98:
6c:90:32:19:6e:d9:d3:38:68:72:67:44:0d:5a:2a:
d6:51:d0:be:96:1d:dc:d8:7f:54:b3:cd:74:e2:9f:
2c:4a:e4:55:98:87:7f:1b:68:2f:cc:db:d6:eb:f2:
58:b0:aa:92:8e:6f:f8:a0:d1:aa:8e:e8:e2:cf:aa:
1f:8e:d7:70:cb:4c:26:3d:17:14:3d:ec:ee:08:9b:
f3:a1:a9:ef:ca:28:9b:6e:b5:1e:ba:7f:8f:31:63:
e8:ff:25:b8:21:6d:df:bd:89:5c:c7:f5:08:d2:8b:
f6:b7:15:8d:87:23:f1:5c:57:b7:20:1f:3c:96:11:
15:6d:24:69:d7:a9:49:d1:9b:98:8d:3d:97:29:eb:
ab:09:b2:d3:02:cc:51:cc:06:77:64:0d:be:ee:72:
29:54:57:05:fe:f0:f1:0f:9e:3c:8f:d8:5f:e2:c2:
f0:61:e5:a7:71:32:64:6e:e6:d0:f6:73:db:c8:2b:
f4:3f:ac:0b:ac:b9:4f:47:69:d1:51:e4:89:4f:eb:
8f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:77:41:3F:17:D4:3D:21:36:58:FA:33:CC:2C:29:AA:EA:FC:96:AD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/q3dBPxfUPSE2WPozzCwpqur8lq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
22:f6:30:e9:d3:ef:20:26:2d:10:30:e8:0c:56:2d:7a:e9:86:
32:60:48:b4:ff:b4:ab:dc:cd:f5:fb:36:eb:3d:c0:0a:24:b7:
71:9e:bb:3d:22:81:8c:68:8b:31:d1:5d:eb:3a:c7:e4:f6:8f:
a6:22:f0:b3:9a:42:a2:af:54:93:c0:2a:d9:c0:8f:f3:42:00:
b5:09:6d:07:76:fd:12:79:ea:a5:0d:e6:c1:8d:94:5f:a5:53:
82:a1:02:1a:e7:9a:84:6b:af:d2:1d:30:cf:ac:15:8d:12:52:
7d:4b:fd:93:23:8a:f7:ac:45:45:ae:83:b4:a9:60:2b:e9:64:
85:98:94:b1:df:36:a3:8b:6f:61:36:b3:38:93:4a:ed:cf:cb:
df:09:61:eb:5a:e5:34:c7:91:17:67:48:83:c3:8a:a0:67:3e:
55:1b:81:13:06:6f:c1:09:ea:6a:87:8f:db:fe:a5:18:08:12:
40:11:f7:69:6b:86:fd:4f:f1:fd:e4:e6:b4:c6:23:0a:47:84:
8a:66:66:6d:18:d1:dd:5e:97:ec:c6:1c:39:a0:90:44:d8:a0:
7f:f2:60:54:1a:76:8b:da:86:6f:88:7c:e2:32:c2:de:d4:6a:
5c:dd:46:22:f3:15:2f:58:17:be:7e:d7:8c:11:bc:26:fc:3c:
74:7d:d8:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:14:17 2025 by rpki-client